I think it is stored in file storage. On my server, the Odoo home directory is /opt/odoo. Inside /opt/odoo there is a hidden folder called ".local" and inside that folder is a session folder (amongst other interesting things).